January 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:0056-1: Recommended update for llvm
by maintenance＠opensuse.org 07 Jan '17

07 Jan '17

openSUSE Recommended Update: Recommended update for llvm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0056-1 Rating: low References: #972334 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for llvm fixes the following issues: - Fix -isystem flags not being passed to scan-build. (boo#972334) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-24=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libLLVM-3.7.0-4.1 libLLVM-debuginfo-3.7.0-4.1 libclang-3.7.0-4.1 libclang-debuginfo-3.7.0-4.1 llvm-3.7.0-4.1 llvm-clang-3.7.0-4.1 llvm-clang-debuginfo-3.7.0-4.1 llvm-clang-devel-3.7.0-4.1 llvm-debuginfo-3.7.0-4.1 llvm-debugsource-3.7.0-4.1 llvm-devel-3.7.0-4.1 llvm-devel-debuginfo-3.7.0-4.1 llvm-vim-plugins-3.7.0-4.1 python-clang-3.7.0-4.1 - openSUSE Leap 42.1 (x86_64): libLLVM-32bit-3.7.0-4.1 libLLVM-debuginfo-32bit-3.7.0-4.1 libclang-32bit-3.7.0-4.1 libclang-debuginfo-32bit-3.7.0-4.1 lldb-3.7.0-4.1 lldb-debuginfo-3.7.0-4.1 lldb-devel-3.7.0-4.1 References: https://bugzilla.suse.com/972334

1 0

openSUSE-RU-2017:0055-1: moderate: Recommended update for source-highlight
by maintenance＠opensuse.org 07 Jan '17

07 Jan '17

openSUSE Recommended Update: Recommended update for source-highlight ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0055-1 Rating: moderate References: #1016309 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for source-highlight fixes the following issues: - incorrect use of lesspipe instead of lessopen (boo#1016309) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-33=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-33=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libsource-highlight-devel-3.1.8-5.1 libsource-highlight4-3.1.8-5.1 libsource-highlight4-debuginfo-3.1.8-5.1 source-highlight-3.1.8-5.1 source-highlight-cgi-3.1.8-5.1 source-highlight-cgi-debuginfo-3.1.8-5.1 source-highlight-debuginfo-3.1.8-5.1 source-highlight-debugsource-3.1.8-5.1 - openSUSE Leap 42.2 (x86_64): libsource-highlight4-32bit-3.1.8-5.1 libsource-highlight4-debuginfo-32bit-3.1.8-5.1 - openSUSE Leap 42.1 (i586 x86_64): libsource-highlight-devel-3.1.8-4.1 libsource-highlight4-3.1.8-4.1 libsource-highlight4-debuginfo-3.1.8-4.1 source-highlight-3.1.8-4.1 source-highlight-cgi-3.1.8-4.1 source-highlight-cgi-debuginfo-3.1.8-4.1 source-highlight-debuginfo-3.1.8-4.1 source-highlight-debugsource-3.1.8-4.1 - openSUSE Leap 42.1 (x86_64): libsource-highlight4-32bit-3.1.8-4.1 libsource-highlight4-debuginfo-32bit-3.1.8-4.1 References: https://bugzilla.suse.com/1016309

1 0

openSUSE-RU-2017:0054-1: important: Recommended update for xf86-video-intel
by maintenance＠opensuse.org 07 Jan '17

07 Jan '17

openSUSE Recommended Update: Recommended update for xf86-video-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0054-1 Rating: important References: #984747 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xf86-video-intel fixes the following issues: - light-locker: missing mouse pointer after suspend and resume (boo#984747) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-35=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xf86-video-intel-2.99.917.651_g34f63f2-3.1 xf86-video-intel-debuginfo-2.99.917.651_g34f63f2-3.1 xf86-video-intel-debugsource-2.99.917.651_g34f63f2-3.1 - openSUSE Leap 42.2 (x86_64): xf86-video-intel-32bit-2.99.917.651_g34f63f2-3.1 xf86-video-intel-debuginfo-32bit-2.99.917.651_g34f63f2-3.1 References: https://bugzilla.suse.com/984747

1 0

openSUSE-RU-2017:0053-1: moderate: Recommended update for phantomjs
by maintenance＠opensuse.org 07 Jan '17

07 Jan '17

openSUSE Recommended Update: Recommended update for phantomjs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0053-1 Rating: moderate References: #1008760 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for phantomjs fixes the following issues: - Downgrade phantomjs to 2.1.1 to fix an issue where PhantomJS crashes on startup. (boo#1008760) - Stop PhantomJS crashing due to wrong Qt plugin type used. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-37=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): phantomjs-2.1.1.0-3.1 phantomjs-debuginfo-2.1.1.0-3.1 References: https://bugzilla.suse.com/1008760

1 0

openSUSE-RU-2017:0052-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 07 Jan '17

07 Jan '17

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0052-1 Rating: moderate References: #1004324 #1008545 #1008568 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for grub2 provides the following fixes: - Load lvm module to support Xen PV booting from LVM volumes. (bsc#1004324) - Fix ARMv7 configuration issues that could lead to unbootable systems. (bnc#1008568) - Fix potential crash when booting ARMv7 systems. (bsc#1008545) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-34=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): grub2-2.02~beta2-89.1 grub2-branding-upstream-2.02~beta2-89.1 grub2-debuginfo-2.02~beta2-89.1 grub2-debugsource-2.02~beta2-89.1 grub2-i386-pc-2.02~beta2-89.1 - openSUSE Leap 42.2 (x86_64): grub2-x86_64-efi-2.02~beta2-89.1 grub2-x86_64-xen-2.02~beta2-89.1 - openSUSE Leap 42.2 (noarch): grub2-snapper-plugin-2.02~beta2-89.1 grub2-systemd-sleep-plugin-2.02~beta2-89.1 - openSUSE Leap 42.2 (i586): grub2-i386-efi-2.02~beta2-89.1 References: https://bugzilla.suse.com/1004324 https://bugzilla.suse.com/1008545 https://bugzilla.suse.com/1008568

1 0

openSUSE-RU-2017:0051-1: moderate: Recommended update for star
by maintenance＠opensuse.org 07 Jan '17

07 Jan '17

openSUSE Recommended Update: Recommended update for star ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0051-1 Rating: moderate References: #1014065 #935569 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for star fixes the following issues: - Set extended attributes after chown(), as recent Linux kernels reset them with a chown() call. (bsc#1014065) - Flush the verbose file stream before checking for missing links. Prevents mixed output when the user redirects star's standard error to standard output and pipe it to tee(1). (bsc#935569) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-32=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-32=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): star-1.5final-74.1 star-debuginfo-1.5final-74.1 star-debugsource-1.5final-74.1 - openSUSE Leap 42.1 (i586 x86_64): star-1.5final-75.1 star-debuginfo-1.5final-75.1 star-debugsource-1.5final-75.1 References: https://bugzilla.suse.com/1014065 https://bugzilla.suse.com/935569

1 0

openSUSE-RU-2017:0050-1: moderate: Recommended update for star
by maintenance＠opensuse.org 07 Jan '17

07 Jan '17

openSUSE Recommended Update: Recommended update for star ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0050-1 Rating: moderate References: #1014065 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for star fixes the following issue: - Linux xattrs are now set after chown() as Linux resets xattrs with a chown() call [boo#1014065] Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2017-31=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): star-1.5final-65.13.1 star-debuginfo-1.5final-65.13.1 star-debugsource-1.5final-65.13.1 References: https://bugzilla.suse.com/1014065

1 0

openSUSE-RU-2017:0049-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 07 Jan '17

07 Jan '17

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0049-1 Rating: moderate References: #1005424 #1007142 #1007867 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for resource-agents fixes the following issues: - docker: Use docker exec for monitor_cmd if supported (bsc#1007867) - adjusting sapdb.sh to work with HANA Multi-Tenant Databases (bsc#1007142) - oracle: fix issue with C## in monprofile (bsc#1005424) - nfsserver: Delete the temp file correctly. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-26=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ldirectord-3.9.7+git.1461938976.cb7c36a-4.1 monitoring-plugins-metadata-3.9.7+git.1461938976.cb7c36a-4.1 resource-agents-3.9.7+git.1461938976.cb7c36a-4.1 resource-agents-debuginfo-3.9.7+git.1461938976.cb7c36a-4.1 resource-agents-debugsource-3.9.7+git.1461938976.cb7c36a-4.1 References: https://bugzilla.suse.com/1005424 https://bugzilla.suse.com/1007142 https://bugzilla.suse.com/1007867

1 0

openSUSE-RU-2017:0048-1: Recommended update for btrfsprogs
by maintenance＠opensuse.org 07 Jan '17

07 Jan '17

openSUSE Recommended Update: Recommended update for btrfsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0048-1 Rating: low References: #912170 #997061 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for btrfsprogs fixes the following issues: - While performing an fsck, an assertion failure could occur because of reusing path in a loop. (bsc#997061) - Add new btrfsprogs-udev-rules package to contain the udev rules. (bsc#912170) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-25=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): btrfsprogs-4.5.3-3.1 btrfsprogs-debuginfo-4.5.3-3.1 btrfsprogs-debugsource-4.5.3-3.1 libbtrfs-devel-4.5.3-3.1 libbtrfs0-4.5.3-3.1 libbtrfs0-debuginfo-4.5.3-3.1 - openSUSE Leap 42.2 (noarch): btrfsprogs-udev-rules-4.5.3-3.1 References: https://bugzilla.suse.com/912170 https://bugzilla.suse.com/997061

1 0

openSUSE-RU-2017:0047-1: important: Recommended update for sg3_utils
by maintenance＠opensuse.org 07 Jan '17

07 Jan '17

openSUSE Recommended Update: Recommended update for sg3_utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0047-1 Rating: important References: #1006175 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sg3_utils fixes the following issues: - issues booting from Add legacy CCISS devices, add udev rules to handle them correctly (boo#1006175) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-27=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libsgutils-devel-1.43-7.1 libsgutils2-2-1.43-7.1 libsgutils2-2-debuginfo-1.43-7.1 sg3_utils-1.43-7.1 sg3_utils-debuginfo-1.43-7.1 sg3_utils-debugsource-1.43-7.1 References: https://bugzilla.suse.com/1006175

1 0

openSUSE-RU-2017:0046-1: Recommended update for wine
by maintenance＠opensuse.org 07 Jan '17

07 Jan '17

openSUSE Recommended Update: Recommended update for wine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0046-1 Rating: low References: #960661 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: The Windows Emulator Wine was updated to the stable release 1.8.6, fixing various bugs. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-36=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-36=1 - openSUSE 13.2: zypper in -t patch openSUSE-2017-36=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): wine-1.8.6-15.1 wine-debuginfo-1.8.6-15.1 wine-debugsource-1.8.6-15.1 wine-devel-1.8.6-15.1 wine-devel-debuginfo-1.8.6-15.1 - openSUSE Leap 42.2 (x86_64): wine-32bit-1.8.6-15.1 wine-debuginfo-32bit-1.8.6-15.1 wine-devel-32bit-1.8.6-15.1 wine-devel-debuginfo-32bit-1.8.6-15.1 - openSUSE Leap 42.1 (i586 x86_64): wine-1.8.6-15.1 wine-debuginfo-1.8.6-15.1 wine-debugsource-1.8.6-15.1 wine-devel-1.8.6-15.1 wine-devel-debuginfo-1.8.6-15.1 - openSUSE Leap 42.1 (x86_64): wine-32bit-1.8.6-15.1 wine-debuginfo-32bit-1.8.6-15.1 wine-devel-32bit-1.8.6-15.1 wine-devel-debuginfo-32bit-1.8.6-15.1 - openSUSE 13.2 (i586 x86_64): wine-1.8.6-15.1 wine-debuginfo-1.8.6-15.1 wine-debugsource-1.8.6-15.1 wine-devel-1.8.6-15.1 wine-devel-debuginfo-1.8.6-15.1 - openSUSE 13.2 (x86_64): wine-32bit-1.8.6-15.1 wine-debuginfo-32bit-1.8.6-15.1 wine-devel-32bit-1.8.6-15.1 wine-devel-debuginfo-32bit-1.8.6-15.1 References: https://bugzilla.suse.com/960661

1 0

openSUSE-SU-2017:0045-1: moderate: Security update for syncthing, syncthing-gtk
by opensuse-security＠opensuse.org 07 Jan '17

07 Jan '17

openSUSE Security Update: Security update for syncthing, syncthing-gtk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0045-1 Rating: moderate References: #1016161 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This updates syncthing to version 0.14.16 and fixes the following issues: The following security issue was fixed: - A remote device that was already accepted by syncthing could perform arbitrary reads and writes outside of the configured directories (boo#1016161) This update also contains a number of upstream improvements in the 0.14.14 version, including: - improved performance - UI improvements - prevention of data inconsistencies syncthing-gtk was updated to 0.9.2.3 to fix reading the configuration with non-ASCII locales. The new version is compatible with syncthing 0.14.x and includes various improvement and fixes. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-30=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): syncthing-gtk-0.9.2.3-3.1 syncthing-gtk-lang-0.9.2.3-3.1 - openSUSE Leap 42.2 (x86_64): syncthing-0.14.16-5.1 References: https://bugzilla.suse.com/1016161

1 0

openSUSE-RU-2017:0044-1: moderate: Recommended update for pw3270
by maintenance＠opensuse.org 07 Jan '17

07 Jan '17

openSUSE Recommended Update: Recommended update for pw3270 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0044-1 Rating: moderate References: #998842 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for pw3270 fixes the following issues: - Fixing PHP5 requires. - Fixing script file chooser - Fixing charset problem on ooRexx plugin - Adding PHP5 support on Debian builds - Fixing gtk2 builds. - Fixing mutex include on latest GCC Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-28=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): lib3270-5_0-5.0-3.1 lib3270-5_0-debuginfo-5.0-3.1 lib3270-devel-5.0-3.1 php5-tn3270-5.0-3.1 php5-tn3270-debuginfo-5.0-3.1 pw3270-5.0-3.1 pw3270-debuginfo-5.0-3.1 pw3270-debugsource-5.0-3.1 pw3270-devel-5.0-3.1 pw3270-java-5.0-3.1 pw3270-java-debuginfo-5.0-3.1 pw3270-javadoc-5.0-3.1 pw3270-plugin-dbus-5.0-3.1 pw3270-plugin-dbus-debuginfo-5.0-3.1 pw3270-plugin-java-5.0-3.1 pw3270-plugin-java-debuginfo-5.0-3.1 pw3270-plugin-rexx-5.0-3.1 pw3270-plugin-rexx-debuginfo-5.0-3.1 python-tn3270-5.0-3.1 python-tn3270-debuginfo-5.0-3.1 References: https://bugzilla.suse.com/998842

1 0

openSUSE-SU-2017:0043-1: moderate: Security update for syncthing, syncthing-gtk
by opensuse-security＠opensuse.org 07 Jan '17

07 Jan '17

openSUSE Security Update: Security update for syncthing, syncthing-gtk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0043-1 Rating: moderate References: #1016161 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This updates syncthing to version 0.14.16 and fixes the following issues: The following security issue was fixed: - A remote device that was already accepted by syncthing could perform arbitrary reads and writes outside of the configured directories (boo#1016161) This update also contains a number of upstream improvements in the 0.14.14 version, including: - improved performance - UI improvements - prevention of data inconsistencies syncthing-gtk was updated to 0.9.2.3 to fix reading the configuration with non-ASCII locales. The new version is compatible with syncthing 0.14.x and includes various improvement and fixes. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-29=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): syncthing-0.14.16-11.1 - openSUSE Leap 42.1 (noarch): syncthing-gtk-0.9.2.3-6.1 syncthing-gtk-lang-0.9.2.3-6.1 References: https://bugzilla.suse.com/1016161

1 0

openSUSE-SU-2017:0035-1: Security update for kopete
by opensuse-security＠opensuse.org 05 Jan '17

05 Jan '17

openSUSE Security Update: Security update for kopete ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0035-1 Rating: low References: #1016982 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for kopete fixes the following issues: - fix encrypting OTR messages after closing and re-opening kopete (boo#1016982, kde#362535) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-19=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): kopete-15.12.3-6.1 kopete-debuginfo-15.12.3-6.1 kopete-debugsource-15.12.3-6.1 kopete-devel-15.12.3-6.1 References: https://bugzilla.suse.com/1016982

1 0

openSUSE-SU-2017:0034-1: Security update for kopete
by opensuse-security＠opensuse.org 05 Jan '17

05 Jan '17

openSUSE Security Update: Security update for kopete ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0034-1 Rating: low References: #1016982 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for kopete fixes the following issues: - fix encrypting OTR messages after closing and re-opening kopete (boo#1016982, kde#362535) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-19=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-19=1 - openSUSE 13.2: zypper in -t patch openSUSE-2017-19=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): kopete-16.08.2-3.1 kopete-debuginfo-16.08.2-3.1 kopete-debugsource-16.08.2-3.1 - openSUSE Leap 42.1 (i586 x86_64): kopete-15.12.3-20.1 kopete-debuginfo-15.12.3-20.1 kopete-debugsource-15.12.3-20.1 kopete-devel-15.12.3-20.1 - openSUSE 13.2 (i586 x86_64): kopete-14.12.3-19.1 kopete-debuginfo-14.12.3-19.1 kopete-debugsource-14.12.3-19.1 kopete-devel-14.12.3-19.1 References: https://bugzilla.suse.com/1016982

1 0

openSUSE-SU-2017:0026-1: moderate: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 04 Jan '17

04 Jan '17

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0026-1 Rating: moderate References: #1015422 Cross-References: CVE-2016-9893 CVE-2016-9895 CVE-2016-9897 CVE-2016-9898 CVE-2016-9899 CVE-2016-9900 CVE-2016-9904 CVE-2016-9905 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update to Mozilla Thunderbird 45.6.0 fixes security issues and bugs. In general, these flaws cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts. The following vulnerabilities were fixed: (boo#1015422) - CVE-2016-9899: Use-after-free while manipulating DOM events and audio elements - CVE-2016-9895: CSP bypass using marquee tag - CVE-2016-9897: Memory corruption in libGLES - CVE-2016-9898: Use-after-free in Editor while manipulating DOM subtrees - CVE-2016-9900: Restricted external resources can be loaded by SVG images through data URLs - CVE-2016-9904: Cross-origin information leak in shared atoms - CVE-2016-9905: Crash in EnumerateSubDocuments - CVE-2016-9893: Memory safety bugs fixed in Thunderbird 45.6 The following bugs were fixed: - The system integration dialog was shown every time when starting Thunderbird Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2017-15=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): MozillaThunderbird-45.6.0-70.95.1 MozillaThunderbird-buildsymbols-45.6.0-70.95.1 MozillaThunderbird-debuginfo-45.6.0-70.95.1 MozillaThunderbird-debugsource-45.6.0-70.95.1 MozillaThunderbird-devel-45.6.0-70.95.1 MozillaThunderbird-translations-common-45.6.0-70.95.1 MozillaThunderbird-translations-other-45.6.0-70.95.1 References: https://www.suse.com/security/cve/CVE-2016-9893.html https://www.suse.com/security/cve/CVE-2016-9895.html https://www.suse.com/security/cve/CVE-2016-9897.html https://www.suse.com/security/cve/CVE-2016-9898.html https://www.suse.com/security/cve/CVE-2016-9899.html https://www.suse.com/security/cve/CVE-2016-9900.html https://www.suse.com/security/cve/CVE-2016-9904.html https://www.suse.com/security/cve/CVE-2016-9905.html https://bugzilla.suse.com/1015422

1 0

openSUSE-SU-2017:0023-1: important: Security update for ImageMagick
by opensuse-security＠opensuse.org 04 Jan '17

04 Jan '17

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0023-1 Rating: important References: #1009318 #1011130 #1011136 #1013376 #1014159 Cross-References: CVE-2014-9848 CVE-2016-8707 CVE-2016-8866 CVE-2016-9556 CVE-2016-9559 CVE-2016-9773 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for ImageMagick fixes the following issues: * CVE-2016-9556 Possible Heap-overflow found by fuzzing [bsc#1011130] * CVE-2016-9559 Possible Null pointer access found by fuzzing [bsc#1011136] * CVE-2016-8707 Possible code execution in Tiff conver utility [bsc#1014159] * CVE-2016-8866 Memory allocation failure in AcquireMagickMemory could lead to Heap overflow [bsc#1009318] * CVE-2016-9559 Possible Null pointer access found by fuzzing [bsc#1011136] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-14=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-14=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ImageMagick-6.8.8.1-25.1 ImageMagick-debuginfo-6.8.8.1-25.1 ImageMagick-debugsource-6.8.8.1-25.1 ImageMagick-devel-6.8.8.1-25.1 ImageMagick-extra-6.8.8.1-25.1 ImageMagick-extra-debuginfo-6.8.8.1-25.1 libMagick++-6_Q16-3-6.8.8.1-25.1 libMagick++-6_Q16-3-debuginfo-6.8.8.1-25.1 libMagick++-devel-6.8.8.1-25.1 libMagickCore-6_Q16-1-6.8.8.1-25.1 libMagickCore-6_Q16-1-debuginfo-6.8.8.1-25.1 libMagickWand-6_Q16-1-6.8.8.1-25.1 libMagickWand-6_Q16-1-debuginfo-6.8.8.1-25.1 perl-PerlMagick-6.8.8.1-25.1 perl-PerlMagick-debuginfo-6.8.8.1-25.1 - openSUSE Leap 42.2 (x86_64): ImageMagick-devel-32bit-6.8.8.1-25.1 libMagick++-6_Q16-3-32bit-6.8.8.1-25.1 libMagick++-6_Q16-3-debuginfo-32bit-6.8.8.1-25.1 libMagick++-devel-32bit-6.8.8.1-25.1 libMagickCore-6_Q16-1-32bit-6.8.8.1-25.1 libMagickCore-6_Q16-1-debuginfo-32bit-6.8.8.1-25.1 libMagickWand-6_Q16-1-32bit-6.8.8.1-25.1 libMagickWand-6_Q16-1-debuginfo-32bit-6.8.8.1-25.1 - openSUSE Leap 42.2 (noarch): ImageMagick-doc-6.8.8.1-25.1 - openSUSE Leap 42.1 (i586 x86_64): ImageMagick-6.8.8.1-27.1 ImageMagick-debuginfo-6.8.8.1-27.1 ImageMagick-debugsource-6.8.8.1-27.1 ImageMagick-devel-6.8.8.1-27.1 ImageMagick-extra-6.8.8.1-27.1 ImageMagick-extra-debuginfo-6.8.8.1-27.1 libMagick++-6_Q16-3-6.8.8.1-27.1 libMagick++-6_Q16-3-debuginfo-6.8.8.1-27.1 libMagick++-devel-6.8.8.1-27.1 libMagickCore-6_Q16-1-6.8.8.1-27.1 libMagickCore-6_Q16-1-debuginfo-6.8.8.1-27.1 libMagickWand-6_Q16-1-6.8.8.1-27.1 libMagickWand-6_Q16-1-debuginfo-6.8.8.1-27.1 perl-PerlMagick-6.8.8.1-27.1 perl-PerlMagick-debuginfo-6.8.8.1-27.1 - openSUSE Leap 42.1 (x86_64): ImageMagick-devel-32bit-6.8.8.1-27.1 libMagick++-6_Q16-3-32bit-6.8.8.1-27.1 libMagick++-6_Q16-3-debuginfo-32bit-6.8.8.1-27.1 libMagick++-devel-32bit-6.8.8.1-27.1 libMagickCore-6_Q16-1-32bit-6.8.8.1-27.1 libMagickCore-6_Q16-1-debuginfo-32bit-6.8.8.1-27.1 libMagickWand-6_Q16-1-32bit-6.8.8.1-27.1 libMagickWand-6_Q16-1-debuginfo-32bit-6.8.8.1-27.1 - openSUSE Leap 42.1 (noarch): ImageMagick-doc-6.8.8.1-27.1 References: https://www.suse.com/security/cve/CVE-2014-9848.html https://www.suse.com/security/cve/CVE-2016-8707.html https://www.suse.com/security/cve/CVE-2016-8866.html https://www.suse.com/security/cve/CVE-2016-9556.html https://www.suse.com/security/cve/CVE-2016-9559.html https://www.suse.com/security/cve/CVE-2016-9773.html https://bugzilla.suse.com/1009318 https://bugzilla.suse.com/1011130 https://bugzilla.suse.com/1011136 https://bugzilla.suse.com/1013376 https://bugzilla.suse.com/1014159

1 0

openSUSE-SU-2017:0022-1: important: Security update for libgme
by opensuse-security＠opensuse.org 04 Jan '17

04 Jan '17

openSUSE Security Update: Security update for libgme ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0022-1 Rating: important References: #1015941 Cross-References: CVE-2016-9957 CVE-2016-9958 CVE-2016-9959 CVE-2016-9960 CVE-2016-9961 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for libgme fixes the following issues: - CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960, CVE-2016-9961: Various issues were fixed in the handling of SPC music files that could have been exploited for gaining privileges of desktop users. [bsc#1015941] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-13=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-13=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libgme-debugsource-0.6.0-8.1 libgme-devel-0.6.0-8.1 libgme0-0.6.0-8.1 libgme0-debuginfo-0.6.0-8.1 - openSUSE Leap 42.2 (x86_64): libgme0-32bit-0.6.0-8.1 libgme0-debuginfo-32bit-0.6.0-8.1 - openSUSE Leap 42.1 (i586 x86_64): libgme-debugsource-0.6.0-7.1 libgme-devel-0.6.0-7.1 libgme0-0.6.0-7.1 libgme0-debuginfo-0.6.0-7.1 - openSUSE Leap 42.1 (x86_64): libgme0-32bit-0.6.0-7.1 libgme0-debuginfo-32bit-0.6.0-7.1 References: https://www.suse.com/security/cve/CVE-2016-9957.html https://www.suse.com/security/cve/CVE-2016-9958.html https://www.suse.com/security/cve/CVE-2016-9959.html https://www.suse.com/security/cve/CVE-2016-9960.html https://www.suse.com/security/cve/CVE-2016-9961.html https://bugzilla.suse.com/1015941

1 0

openSUSE-SU-2017:0021-1: moderate: Security update for samba
by opensuse-security＠opensuse.org 04 Jan '17

04 Jan '17

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0021-1 Rating: moderate References: #1009085 #1014437 #1014441 #1014442 Cross-References: CVE-2016-2123 CVE-2016-2125 CVE-2016-2126 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for samba fixes the following issues: Security issues fixed: - CVE-2016-2125: Don't send delegated credentials to all servers. (bsc#1014441). - CVE-2016-2126: Denial of service due to a client triggered crash in the winbindd parent process. (bsc#1014442). - CVE-2016-2123: Heap-based Buffer Overflow Remote Code Execution Vulnerability. (bsc#1014437). This component is not built into our packages, so we are not affected. Non security issues fixed: - s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-12=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ctdb-4.4.2-9.1 ctdb-debuginfo-4.4.2-9.1 ctdb-tests-4.4.2-9.1 ctdb-tests-debuginfo-4.4.2-9.1 libdcerpc-binding0-4.4.2-9.1 libdcerpc-binding0-debuginfo-4.4.2-9.1 libdcerpc-devel-4.4.2-9.1 libdcerpc-samr-devel-4.4.2-9.1 libdcerpc-samr0-4.4.2-9.1 libdcerpc-samr0-debuginfo-4.4.2-9.1 libdcerpc0-4.4.2-9.1 libdcerpc0-debuginfo-4.4.2-9.1 libndr-devel-4.4.2-9.1 libndr-krb5pac-devel-4.4.2-9.1 libndr-krb5pac0-4.4.2-9.1 libndr-krb5pac0-debuginfo-4.4.2-9.1 libndr-nbt-devel-4.4.2-9.1 libndr-nbt0-4.4.2-9.1 libndr-nbt0-debuginfo-4.4.2-9.1 libndr-standard-devel-4.4.2-9.1 libndr-standard0-4.4.2-9.1 libndr-standard0-debuginfo-4.4.2-9.1 libndr0-4.4.2-9.1 libndr0-debuginfo-4.4.2-9.1 libnetapi-devel-4.4.2-9.1 libnetapi0-4.4.2-9.1 libnetapi0-debuginfo-4.4.2-9.1 libsamba-credentials-devel-4.4.2-9.1 libsamba-credentials0-4.4.2-9.1 libsamba-credentials0-debuginfo-4.4.2-9.1 libsamba-errors-devel-4.4.2-9.1 libsamba-errors0-4.4.2-9.1 libsamba-errors0-debuginfo-4.4.2-9.1 libsamba-hostconfig-devel-4.4.2-9.1 libsamba-hostconfig0-4.4.2-9.1 libsamba-hostconfig0-debuginfo-4.4.2-9.1 libsamba-passdb-devel-4.4.2-9.1 libsamba-passdb0-4.4.2-9.1 libsamba-passdb0-debuginfo-4.4.2-9.1 libsamba-policy-devel-4.4.2-9.1 libsamba-policy0-4.4.2-9.1 libsamba-policy0-debuginfo-4.4.2-9.1 libsamba-util-devel-4.4.2-9.1 libsamba-util0-4.4.2-9.1 libsamba-util0-debuginfo-4.4.2-9.1 libsamdb-devel-4.4.2-9.1 libsamdb0-4.4.2-9.1 libsamdb0-debuginfo-4.4.2-9.1 libsmbclient-devel-4.4.2-9.1 libsmbclient0-4.4.2-9.1 libsmbclient0-debuginfo-4.4.2-9.1 libsmbconf-devel-4.4.2-9.1 libsmbconf0-4.4.2-9.1 libsmbconf0-debuginfo-4.4.2-9.1 libsmbldap-devel-4.4.2-9.1 libsmbldap0-4.4.2-9.1 libsmbldap0-debuginfo-4.4.2-9.1 libtevent-util-devel-4.4.2-9.1 libtevent-util0-4.4.2-9.1 libtevent-util0-debuginfo-4.4.2-9.1 libwbclient-devel-4.4.2-9.1 libwbclient0-4.4.2-9.1 libwbclient0-debuginfo-4.4.2-9.1 samba-4.4.2-9.1 samba-client-4.4.2-9.1 samba-client-debuginfo-4.4.2-9.1 samba-core-devel-4.4.2-9.1 samba-debuginfo-4.4.2-9.1 samba-debugsource-4.4.2-9.1 samba-libs-4.4.2-9.1 samba-libs-debuginfo-4.4.2-9.1 samba-pidl-4.4.2-9.1 samba-python-4.4.2-9.1 samba-python-debuginfo-4.4.2-9.1 samba-test-4.4.2-9.1 samba-test-debuginfo-4.4.2-9.1 samba-winbind-4.4.2-9.1 samba-winbind-debuginfo-4.4.2-9.1 - openSUSE Leap 42.2 (noarch): samba-doc-4.4.2-9.1 - openSUSE Leap 42.2 (x86_64): libdcerpc-binding0-32bit-4.4.2-9.1 libdcerpc-binding0-debuginfo-32bit-4.4.2-9.1 libdcerpc-samr0-32bit-4.4.2-9.1 libdcerpc-samr0-debuginfo-32bit-4.4.2-9.1 libdcerpc0-32bit-4.4.2-9.1 libdcerpc0-debuginfo-32bit-4.4.2-9.1 libndr-krb5pac0-32bit-4.4.2-9.1 libndr-krb5pac0-debuginfo-32bit-4.4.2-9.1 libndr-nbt0-32bit-4.4.2-9.1 libndr-nbt0-debuginfo-32bit-4.4.2-9.1 libndr-standard0-32bit-4.4.2-9.1 libndr-standard0-debuginfo-32bit-4.4.2-9.1 libndr0-32bit-4.4.2-9.1 libndr0-debuginfo-32bit-4.4.2-9.1 libnetapi0-32bit-4.4.2-9.1 libnetapi0-debuginfo-32bit-4.4.2-9.1 libsamba-credentials0-32bit-4.4.2-9.1 libsamba-credentials0-debuginfo-32bit-4.4.2-9.1 libsamba-errors0-32bit-4.4.2-9.1 libsamba-errors0-debuginfo-32bit-4.4.2-9.1 libsamba-hostconfig0-32bit-4.4.2-9.1 libsamba-hostconfig0-debuginfo-32bit-4.4.2-9.1 libsamba-passdb0-32bit-4.4.2-9.1 libsamba-passdb0-debuginfo-32bit-4.4.2-9.1 libsamba-policy0-32bit-4.4.2-9.1 libsamba-policy0-debuginfo-32bit-4.4.2-9.1 libsamba-util0-32bit-4.4.2-9.1 libsamba-util0-debuginfo-32bit-4.4.2-9.1 libsamdb0-32bit-4.4.2-9.1 libsamdb0-debuginfo-32bit-4.4.2-9.1 libsmbclient0-32bit-4.4.2-9.1 libsmbclient0-debuginfo-32bit-4.4.2-9.1 libsmbconf0-32bit-4.4.2-9.1 libsmbconf0-debuginfo-32bit-4.4.2-9.1 libsmbldap0-32bit-4.4.2-9.1 libsmbldap0-debuginfo-32bit-4.4.2-9.1 libtevent-util0-32bit-4.4.2-9.1 libtevent-util0-debuginfo-32bit-4.4.2-9.1 libwbclient0-32bit-4.4.2-9.1 libwbclient0-debuginfo-32bit-4.4.2-9.1 samba-client-32bit-4.4.2-9.1 samba-client-debuginfo-32bit-4.4.2-9.1 samba-libs-32bit-4.4.2-9.1 samba-libs-debuginfo-32bit-4.4.2-9.1 samba-winbind-32bit-4.4.2-9.1 samba-winbind-debuginfo-32bit-4.4.2-9.1 References: https://www.suse.com/security/cve/CVE-2016-2123.html https://www.suse.com/security/cve/CVE-2016-2125.html https://www.suse.com/security/cve/CVE-2016-2126.html https://bugzilla.suse.com/1009085 https://bugzilla.suse.com/1014437 https://bugzilla.suse.com/1014441 https://bugzilla.suse.com/1014442

1 0

openSUSE-SU-2017:0020-1: moderate: Security update for samba
by opensuse-security＠opensuse.org 04 Jan '17

04 Jan '17

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0020-1 Rating: moderate References: #1001203 #1009085 #1014437 #1014441 #1014442 #975299 #986675 #991564 #994500 #997833 Cross-References: CVE-2016-2123 CVE-2016-2125 CVE-2016-2126 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has 7 fixes is now available. Description: This update for samba fixes the following issues: Security issues fixed: - CVE-2016-2125: Don't send delegated credentials to all servers. (bsc#1014441). - CVE-2016-2126: Denial of service due to a client triggered crash in the winbindd parent process. (bsc#1014442). - CVE-2016-2123: Heap-based Buffer Overflow Remote Code Execution Vulnerability. (bsc#1014437). The component affected is not built in our packages. Non security issues fixed: - s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085) - Add doc changes for net ads --no-dns-updates switch; (bsc#991564) - Include vfstest in samba-test; (bsc#1001203). - s3/winbindd: using default domain with user(a)domain.com format fails (bsc#997833). - Fix illegal memory access after memory has been deleted (bsc#975299). - Fix bug in tevent poll backend causing winbind to loop tightly (bsc#994500). - Various fixes for spnego/ntlm (bsc#986675). This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-11=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ctdb-4.2.4-24.1 ctdb-debuginfo-4.2.4-24.1 ctdb-devel-4.2.4-24.1 ctdb-tests-4.2.4-24.1 ctdb-tests-debuginfo-4.2.4-24.1 libdcerpc-atsvc-devel-4.2.4-24.1 libdcerpc-atsvc0-4.2.4-24.1 libdcerpc-atsvc0-debuginfo-4.2.4-24.1 libdcerpc-binding0-4.2.4-24.1 libdcerpc-binding0-debuginfo-4.2.4-24.1 libdcerpc-devel-4.2.4-24.1 libdcerpc-samr-devel-4.2.4-24.1 libdcerpc-samr0-4.2.4-24.1 libdcerpc-samr0-debuginfo-4.2.4-24.1 libdcerpc0-4.2.4-24.1 libdcerpc0-debuginfo-4.2.4-24.1 libgensec-devel-4.2.4-24.1 libgensec0-4.2.4-24.1 libgensec0-debuginfo-4.2.4-24.1 libndr-devel-4.2.4-24.1 libndr-krb5pac-devel-4.2.4-24.1 libndr-krb5pac0-4.2.4-24.1 libndr-krb5pac0-debuginfo-4.2.4-24.1 libndr-nbt-devel-4.2.4-24.1 libndr-nbt0-4.2.4-24.1 libndr-nbt0-debuginfo-4.2.4-24.1 libndr-standard-devel-4.2.4-24.1 libndr-standard0-4.2.4-24.1 libndr-standard0-debuginfo-4.2.4-24.1 libndr0-4.2.4-24.1 libndr0-debuginfo-4.2.4-24.1 libnetapi-devel-4.2.4-24.1 libnetapi0-4.2.4-24.1 libnetapi0-debuginfo-4.2.4-24.1 libregistry-devel-4.2.4-24.1 libregistry0-4.2.4-24.1 libregistry0-debuginfo-4.2.4-24.1 libsamba-credentials-devel-4.2.4-24.1 libsamba-credentials0-4.2.4-24.1 libsamba-credentials0-debuginfo-4.2.4-24.1 libsamba-hostconfig-devel-4.2.4-24.1 libsamba-hostconfig0-4.2.4-24.1 libsamba-hostconfig0-debuginfo-4.2.4-24.1 libsamba-passdb-devel-4.2.4-24.1 libsamba-passdb0-4.2.4-24.1 libsamba-passdb0-debuginfo-4.2.4-24.1 libsamba-policy-devel-4.2.4-24.1 libsamba-policy0-4.2.4-24.1 libsamba-policy0-debuginfo-4.2.4-24.1 libsamba-util-devel-4.2.4-24.1 libsamba-util0-4.2.4-24.1 libsamba-util0-debuginfo-4.2.4-24.1 libsamdb-devel-4.2.4-24.1 libsamdb0-4.2.4-24.1 libsamdb0-debuginfo-4.2.4-24.1 libsmbclient-devel-4.2.4-24.1 libsmbclient-raw-devel-4.2.4-24.1 libsmbclient-raw0-4.2.4-24.1 libsmbclient-raw0-debuginfo-4.2.4-24.1 libsmbclient0-4.2.4-24.1 libsmbclient0-debuginfo-4.2.4-24.1 libsmbconf-devel-4.2.4-24.1 libsmbconf0-4.2.4-24.1 libsmbconf0-debuginfo-4.2.4-24.1 libsmbldap-devel-4.2.4-24.1 libsmbldap0-4.2.4-24.1 libsmbldap0-debuginfo-4.2.4-24.1 libtevent-util-devel-4.2.4-24.1 libtevent-util0-4.2.4-24.1 libtevent-util0-debuginfo-4.2.4-24.1 libwbclient-devel-4.2.4-24.1 libwbclient0-4.2.4-24.1 libwbclient0-debuginfo-4.2.4-24.1 samba-4.2.4-24.1 samba-client-4.2.4-24.1 samba-client-debuginfo-4.2.4-24.1 samba-core-devel-4.2.4-24.1 samba-debuginfo-4.2.4-24.1 samba-debugsource-4.2.4-24.1 samba-libs-4.2.4-24.1 samba-libs-debuginfo-4.2.4-24.1 samba-pidl-4.2.4-24.1 samba-python-4.2.4-24.1 samba-python-debuginfo-4.2.4-24.1 samba-test-4.2.4-24.1 samba-test-debuginfo-4.2.4-24.1 samba-test-devel-4.2.4-24.1 samba-winbind-4.2.4-24.1 samba-winbind-debuginfo-4.2.4-24.1 - openSUSE Leap 42.1 (x86_64): libdcerpc-atsvc0-32bit-4.2.4-24.1 libdcerpc-atsvc0-debuginfo-32bit-4.2.4-24.1 libdcerpc-binding0-32bit-4.2.4-24.1 libdcerpc-binding0-debuginfo-32bit-4.2.4-24.1 libdcerpc-samr0-32bit-4.2.4-24.1 libdcerpc-samr0-debuginfo-32bit-4.2.4-24.1 libdcerpc0-32bit-4.2.4-24.1 libdcerpc0-debuginfo-32bit-4.2.4-24.1 libgensec0-32bit-4.2.4-24.1 libgensec0-debuginfo-32bit-4.2.4-24.1 libndr-krb5pac0-32bit-4.2.4-24.1 libndr-krb5pac0-debuginfo-32bit-4.2.4-24.1 libndr-nbt0-32bit-4.2.4-24.1 libndr-nbt0-debuginfo-32bit-4.2.4-24.1 libndr-standard0-32bit-4.2.4-24.1 libndr-standard0-debuginfo-32bit-4.2.4-24.1 libndr0-32bit-4.2.4-24.1 libndr0-debuginfo-32bit-4.2.4-24.1 libnetapi0-32bit-4.2.4-24.1 libnetapi0-debuginfo-32bit-4.2.4-24.1 libregistry0-32bit-4.2.4-24.1 libregistry0-debuginfo-32bit-4.2.4-24.1 libsamba-credentials0-32bit-4.2.4-24.1 libsamba-credentials0-debuginfo-32bit-4.2.4-24.1 libsamba-hostconfig0-32bit-4.2.4-24.1 libsamba-hostconfig0-debuginfo-32bit-4.2.4-24.1 libsamba-passdb0-32bit-4.2.4-24.1 libsamba-passdb0-debuginfo-32bit-4.2.4-24.1 libsamba-policy0-32bit-4.2.4-24.1 libsamba-policy0-debuginfo-32bit-4.2.4-24.1 libsamba-util0-32bit-4.2.4-24.1 libsamba-util0-debuginfo-32bit-4.2.4-24.1 libsamdb0-32bit-4.2.4-24.1 libsamdb0-debuginfo-32bit-4.2.4-24.1 libsmbclient-raw0-32bit-4.2.4-24.1 libsmbclient-raw0-debuginfo-32bit-4.2.4-24.1 libsmbclient0-32bit-4.2.4-24.1 libsmbclient0-debuginfo-32bit-4.2.4-24.1 libsmbconf0-32bit-4.2.4-24.1 libsmbconf0-debuginfo-32bit-4.2.4-24.1 libsmbldap0-32bit-4.2.4-24.1 libsmbldap0-debuginfo-32bit-4.2.4-24.1 libtevent-util0-32bit-4.2.4-24.1 libtevent-util0-debuginfo-32bit-4.2.4-24.1 libwbclient0-32bit-4.2.4-24.1 libwbclient0-debuginfo-32bit-4.2.4-24.1 samba-32bit-4.2.4-24.1 samba-client-32bit-4.2.4-24.1 samba-client-debuginfo-32bit-4.2.4-24.1 samba-debuginfo-32bit-4.2.4-24.1 samba-libs-32bit-4.2.4-24.1 samba-libs-debuginfo-32bit-4.2.4-24.1 samba-winbind-32bit-4.2.4-24.1 samba-winbind-debuginfo-32bit-4.2.4-24.1 - openSUSE Leap 42.1 (noarch): samba-doc-4.2.4-24.1 References: https://www.suse.com/security/cve/CVE-2016-2123.html https://www.suse.com/security/cve/CVE-2016-2125.html https://www.suse.com/security/cve/CVE-2016-2126.html https://bugzilla.suse.com/1001203 https://bugzilla.suse.com/1009085 https://bugzilla.suse.com/1014437 https://bugzilla.suse.com/1014441 https://bugzilla.suse.com/1014442 https://bugzilla.suse.com/975299 https://bugzilla.suse.com/986675 https://bugzilla.suse.com/991564 https://bugzilla.suse.com/994500 https://bugzilla.suse.com/997833

1 0

openSUSE-SU-2017:0016-1: important: Security update for dnsmasq
by opensuse-security＠opensuse.org 03 Jan '17

03 Jan '17

openSUSE Security Update: Security update for dnsmasq ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0016-1 Rating: important References: #983273 Cross-References: CVE-2015-8899 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for dnsmasq fixes the following issues: - CVE-2015-8899: Denial of service between local and remote dns entries (bsc#983273) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-10=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-10=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dnsmasq-2.71-8.1 dnsmasq-debuginfo-2.71-8.1 dnsmasq-debugsource-2.71-8.1 dnsmasq-utils-2.71-8.1 dnsmasq-utils-debuginfo-2.71-8.1 - openSUSE Leap 42.1 (i586 x86_64): dnsmasq-2.71-9.1 dnsmasq-debuginfo-2.71-9.1 dnsmasq-debugsource-2.71-9.1 dnsmasq-utils-2.71-9.1 dnsmasq-utils-debuginfo-2.71-9.1 References: https://www.suse.com/security/cve/CVE-2015-8899.html https://bugzilla.suse.com/983273

1 0

openSUSE-SU-2017:0015-1: moderate: Security update for wget
by opensuse-security＠opensuse.org 03 Jan '17

03 Jan '17

openSUSE Security Update: Security update for wget ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0015-1 Rating: moderate References: #1005091 #1012677 #995964 Cross-References: CVE-2016-7098 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for wget fixes the following issues: Security issues fixed: - CVE-2016-7098: Fixed a potential race condition by creating files with .tmp ext and making them accessible to the current user only. (bsc#995964) Non security issues fixed: - bsc#1005091: Don't call xfree() on string returned by usr_error() - bsc#1012677: Add support for enforcing TLSv1.1 and TLSv1.2 (TLS 1.2 support was already present, but it was not enforcable). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-9=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-9=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): wget-1.14-6.1 wget-debuginfo-1.14-6.1 wget-debugsource-1.14-6.1 - openSUSE Leap 42.1 (i586 x86_64): wget-1.14-8.1 wget-debuginfo-1.14-8.1 wget-debugsource-1.14-8.1 References: https://www.suse.com/security/cve/CVE-2016-7098.html https://bugzilla.suse.com/1005091 https://bugzilla.suse.com/1012677 https://bugzilla.suse.com/995964

1 0

openSUSE-RU-2017:0012-1: Recommended update for clamav-database
by maintenance＠opensuse.org 02 Jan '17

02 Jan '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0012-1 Rating: low References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh Jan 2nd. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-7=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-7=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201701020005-22.1 - openSUSE Leap 42.1 (noarch): clamav-database-201701020005-201.1 References:

1 0

openSUSE-SU-2017:0009-1: moderate: Security update for GNU Health and it's dependencies
by opensuse-security＠opensuse.org 02 Jan '17

02 Jan '17

openSUSE Security Update: Security update for GNU Health and it's dependencies ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0009-1 Rating: moderate References: #1016817 #1016885 #1016886 Cross-References: CVE-2016-1241 CVE-2016-1242 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update provides version 3.0.5 of GNU Health including several fixes and improvements. - Update to ICD10 version 2016. - Fix error when printing prescription using review dates. - Fix error on summary report when no date of birth is assigned to the person. Additionally the following dependencies have been updated: tryton: - Update to 3.8.12. - Sanitize path in file open. (boo#1016886, CVE-2016-1242) - Prevent read of user password hash. (boo#1016885, CVE-2016-1241) trytond: - Update to 3.8.9. - Sanitize path in file open. (boo#1016886, CVE-2016-1242) - Prevent read of user password hash. (boo#1016885, CVE-2016-1241) trytond_account: - Update to 3.8.5. trytond_account_invoice: - Update to 3.8.4. trytond_stock: - Update to 3.8.4. trytond_stock_lot: - Update to 3.8.1. porteus: - Update to 3.8.5. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-6=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): gnuhealth-3.0.5-3.1 proteus-3.8.5-3.1 tryton-3.8.12-3.1 trytond-3.8.9-4.1 trytond_account-3.8.5-3.1 trytond_account_invoice-3.8.4-3.1 trytond_stock-3.8.4-3.1 trytond_stock_lot-3.8.1-3.1 References: https://www.suse.com/security/cve/CVE-2016-1241.html https://www.suse.com/security/cve/CVE-2016-1242.html https://bugzilla.suse.com/1016817 https://bugzilla.suse.com/1016885 https://bugzilla.suse.com/1016886

1 0

openSUSE-SU-2017:0008-1: important: Security update for xen
by opensuse-security＠opensuse.org 02 Jan '17

02 Jan '17

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0008-1 Rating: important References: #1000106 #1000195 #1002496 #1003030 #1003032 #1004016 #1005004 #1005005 #1007157 #1007160 #1009100 #1009103 #1009104 #1009107 #1009109 #1009111 #1011652 #1012651 #1014298 #1016340 #953518 Cross-References: CVE-2016-10013 CVE-2016-10024 CVE-2016-7777 CVE-2016-7908 CVE-2016-7909 CVE-2016-8576 CVE-2016-8667 CVE-2016-8669 CVE-2016-8909 CVE-2016-8910 CVE-2016-9379 CVE-2016-9380 CVE-2016-9381 CVE-2016-9382 CVE-2016-9383 CVE-2016-9385 CVE-2016-9386 CVE-2016-9637 CVE-2016-9932 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves 19 vulnerabilities and has two fixes is now available. Description: This updates xen to version 4.4.4_06 to fix the following issues: - An unprivileged user in a guest could gain guest could escalate privilege to that of the guest kernel, if it had could invoke the instruction emulator. Only 64-bit x86 HVM guest were affected. Linux guest have not been vulnerable. (boo#1016340, CVE-2016-10013) - An unprivileged user in a 64 bit x86 guest could gain information from the host, crash the host or gain privilege of the host (boo#1009107, CVE-2016-9383) - An unprivileged guest process could (unintentionally or maliciously) obtain or ocorrupt sensitive information of other programs in the same guest. Only x86 HVM guests have been affected. The attacker needs to be able to trigger the Xen instruction emulator. (boo#1000106, CVE-2016-7777) - A guest on x86 systems could read small parts of hypervisor stack data (boo#1012651, CVE-2016-9932) - A malicious guest kernel could hang or crash the host system (boo#1014298, CVE-2016-10024) - A malicious guest administrator could escalate their privilege to that of the host. Only affects x86 HVM guests using qemu older version 1.6.0 or using the qemu-xen-traditional. (boo#1011652, CVE-2016-9637) - An unprivileged guest user could escalate privilege to that of the guest administrator on x86 HVM guests, especially on Intel CPUs (boo#1009100, CVE-2016-9386) - An unprivileged guest user could escalate privilege to that of the guest administrator (on AMD CPUs) or crash the system (on Intel CPUs) on 32-bit x86 HVM guests. Only guest operating systems that allowed a new task to start in VM86 mode were affected. (boo#1009103, CVE-2016-9382) - A malicious guest administrator could crash the host on x86 PV guests only (boo#1009104, CVE-2016-9385) - A malicious guest administrator could get privilege of the host emulator process on x86 HVM guests. (boo#1009109, CVE-2016-9381) - A vulnerability in pygrub allowed a malicious guest administrator to obtain the contents of sensitive host files, or even delete those files (boo#1009111, CVE-2016-9379, CVE-2016-9380) - A privileged guest user could cause an infinite loop in the RTL8139 ethernet emulation to consume CPU cycles on the host, causing a DoS situation (boo#1007157, CVE-2016-8910) - A privileged guest user could cause an infinite loop in the intel-hda sound emulation to consume CPU cycles on the host, causing a DoS situation (boo#1007160, CVE-2016-8909) - A privileged guest user could cause a crash of the emulator process on the host by exploiting a divide by zero vulnerability of the JAZZ RC4030 chipset emulation (boo#1005004 CVE-2016-8667) - A privileged guest user could cause a crash of the emulator process on the host by exploiting a divide by zero issue of the 16550A UART emulation (boo#1005005, CVE-2016-8669) - A privileged guest user could cause an infinite loop in the USB xHCI emulation, causing a DoS situation on the host (boo#1004016, CVE-2016-8576) - A privileged guest user could cause an infinite loop in the ColdFire Fash Ethernet Controller emulation, causing a DoS situation on the host (boo#1003030, CVE-2016-7908) - A privileged guest user could cause an infinite loop in the AMD PC-Net II emulation, causing a DoS situation on the host (boo#1003032, CVE-2016-7909) - Cause a reload of clvm in the block-dmmd script to avoid a blocking lvchange call (boo#1002496) - Also unplug SCSI disks in qemu-xen-traditional for upstream unplug protocol. Before a single SCSI storage devices added to HVM guests could appear multiple times in the guest. (boo#953518) - Fix a kernel panic / black screen when trying to boot a XEN kernel on some UEFI firmwares (boo#1000195) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2017-5=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xen-debugsource-4.4.4_06-58.1 xen-devel-4.4.4_06-58.1 xen-libs-4.4.4_06-58.1 xen-libs-debuginfo-4.4.4_06-58.1 xen-tools-domU-4.4.4_06-58.1 xen-tools-domU-debuginfo-4.4.4_06-58.1 - openSUSE 13.2 (x86_64): xen-4.4.4_06-58.1 xen-doc-html-4.4.4_06-58.1 xen-kmp-default-4.4.4_06_k3.16.7_53-58.1 xen-kmp-default-debuginfo-4.4.4_06_k3.16.7_53-58.1 xen-kmp-desktop-4.4.4_06_k3.16.7_53-58.1 xen-kmp-desktop-debuginfo-4.4.4_06_k3.16.7_53-58.1 xen-libs-32bit-4.4.4_06-58.1 xen-libs-debuginfo-32bit-4.4.4_06-58.1 xen-tools-4.4.4_06-58.1 xen-tools-debuginfo-4.4.4_06-58.1 References: https://www.suse.com/security/cve/CVE-2016-10013.html https://www.suse.com/security/cve/CVE-2016-10024.html https://www.suse.com/security/cve/CVE-2016-7777.html https://www.suse.com/security/cve/CVE-2016-7908.html https://www.suse.com/security/cve/CVE-2016-7909.html https://www.suse.com/security/cve/CVE-2016-8576.html https://www.suse.com/security/cve/CVE-2016-8667.html https://www.suse.com/security/cve/CVE-2016-8669.html https://www.suse.com/security/cve/CVE-2016-8909.html https://www.suse.com/security/cve/CVE-2016-8910.html https://www.suse.com/security/cve/CVE-2016-9379.html https://www.suse.com/security/cve/CVE-2016-9380.html https://www.suse.com/security/cve/CVE-2016-9381.html https://www.suse.com/security/cve/CVE-2016-9382.html https://www.suse.com/security/cve/CVE-2016-9383.html https://www.suse.com/security/cve/CVE-2016-9385.html https://www.suse.com/security/cve/CVE-2016-9386.html https://www.suse.com/security/cve/CVE-2016-9637.html https://www.suse.com/security/cve/CVE-2016-9932.html https://bugzilla.suse.com/1000106 https://bugzilla.suse.com/1000195 https://bugzilla.suse.com/1002496 https://bugzilla.suse.com/1003030 https://bugzilla.suse.com/1003032 https://bugzilla.suse.com/1004016 https://bugzilla.suse.com/1005004 https://bugzilla.suse.com/1005005 https://bugzilla.suse.com/1007157 https://bugzilla.suse.com/1007160 https://bugzilla.suse.com/1009100 https://bugzilla.suse.com/1009103 https://bugzilla.suse.com/1009104 https://bugzilla.suse.com/1009107 https://bugzilla.suse.com/1009109 https://bugzilla.suse.com/1009111 https://bugzilla.suse.com/1011652 https://bugzilla.suse.com/1012651 https://bugzilla.suse.com/1014298 https://bugzilla.suse.com/1016340 https://bugzilla.suse.com/953518

1 0

openSUSE-SU-2017:0007-1: important: Security update for xen
by opensuse-security＠opensuse.org 02 Jan '17

02 Jan '17

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0007-1 Rating: important References: #1000106 #1002496 #1003030 #1003032 #1003870 #1004016 #1005004 #1005005 #1007157 #1007160 #1009100 #1009103 #1009104 #1009107 #1009108 #1009109 #1009111 #1011652 #1012651 #1013657 #1013668 #1014298 #1016340 Cross-References: CVE-2016-10013 CVE-2016-10024 CVE-2016-7777 CVE-2016-7908 CVE-2016-7909 CVE-2016-7995 CVE-2016-8576 CVE-2016-8667 CVE-2016-8669 CVE-2016-8909 CVE-2016-8910 CVE-2016-9101 CVE-2016-9377 CVE-2016-9378 CVE-2016-9379 CVE-2016-9380 CVE-2016-9381 CVE-2016-9382 CVE-2016-9383 CVE-2016-9385 CVE-2016-9386 CVE-2016-9637 CVE-2016-9776 CVE-2016-9932 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 24 vulnerabilities is now available. Description: This updates xen to version 4.5.5 to fix the following issues: - An unprivileged user in a guest could gain guest could escalate privilege to that of the guest kernel, if it had could invoke the instruction emulator. Only 64-bit x86 HVM guest were affected. Linux guest have not been vulnerable. (boo#1016340, CVE-2016-10013) - An unprivileged user in a 64 bit x86 guest could gain information from the host, crash the host or gain privilege of the host (boo#1009107, CVE-2016-9383) - An unprivileged guest process could (unintentionally or maliciously) obtain or ocorrupt sensitive information of other programs in the same guest. Only x86 HVM guests have been affected. The attacker needs to be able to trigger the Xen instruction emulator. (boo#1000106, CVE-2016-7777) - A guest on x86 systems could read small parts of hypervisor stack data (boo#1012651, CVE-2016-9932) - A malicious guest kernel could hang or crash the host system (boo#1014298, CVE-2016-10024) - The epro100 emulated network device caused a memory leak in the host when unplugged in the guest. A privileged user in the guest could use this to cause a DoS on the host or potentially crash the guest process on the host (boo#1013668, CVE-2016-9101) - The ColdFire Fast Ethernet Controller was vulnerable to an infinite loop that could be trigged by a privileged user in the guest, leading to DoS (boo#1013657, CVE-2016-9776) - A malicious guest administrator could escalate their privilege to that of the host. Only affects x86 HVM guests using qemu older version 1.6.0 or using the qemu-xen-traditional. (boo#1011652, CVE-2016-9637) - An unprivileged guest user could escalate privilege to that of the guest administrator on x86 HVM guests, especially on Intel CPUs (boo#1009100, CVE-2016-9386) - An unprivileged guest user could escalate privilege to that of the guest administrator (on AMD CPUs) or crash the system (on Intel CPUs) on 32-bit x86 HVM guests. Only guest operating systems that allowed a new task to start in VM86 mode were affected. (boo#1009103, CVE-2016-9382) - A malicious guest administrator could crash the host on x86 PV guests only (boo#1009104, CVE-2016-9385) - An unprivileged guest user was able to crash the guest. (boo#1009108, CVE-2016-9377, CVE-2016-9378) - A malicious guest administrator could get privilege of the host emulator process on x86 HVM guests. (boo#1009109, CVE-2016-9381) - A vulnerability in pygrub allowed a malicious guest administrator to obtain the contents of sensitive host files, or even delete those files (boo#1009111, CVE-2016-9379, CVE-2016-9380) - A privileged guest user could cause an infinite loop in the RTL8139 ethernet emulation to consume CPU cycles on the host, causing a DoS situation (boo#1007157, CVE-2016-8910) - A privileged guest user could cause an infinite loop in the intel-hda sound emulation to consume CPU cycles on the host, causing a DoS situation (boo#1007160, CVE-2016-8909) - A privileged guest user could cause a crash of the emulator process on the host by exploiting a divide by zero vulnerability of the JAZZ RC4030 chipset emulation (boo#1005004 CVE-2016-8667) - A privileged guest user could cause a crash of the emulator process on the host by exploiting a divide by zero issue of the 16550A UART emulation (boo#1005005, CVE-2016-8669) - A privileged guest user could cause a memory leak in the USB EHCI emulation, causing a DoS situation on the host (boo#1003870, CVE-2016-7995) - A privileged guest user could cause an infinite loop in the USB xHCI emulation, causing a DoS situation on the host (boo#1004016, CVE-2016-8576) - A privileged guest user could cause an infinite loop in the ColdFire Fash Ethernet Controller emulation, causing a DoS situation on the host (boo#1003030, CVE-2016-7908) - A privileged guest user could cause an infinite loop in the AMD PC-Net II emulation, causing a DoS situation on the host (boo#1003032, CVE-2016-7909) - Cause a reload of clvm in the block-dmmd script to avoid a blocking lvchange call (boo#1002496) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-4=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): xen-debugsource-4.5.5_06-18.1 xen-devel-4.5.5_06-18.1 xen-libs-4.5.5_06-18.1 xen-libs-debuginfo-4.5.5_06-18.1 xen-tools-domU-4.5.5_06-18.1 xen-tools-domU-debuginfo-4.5.5_06-18.1 - openSUSE Leap 42.1 (x86_64): xen-4.5.5_06-18.1 xen-doc-html-4.5.5_06-18.1 xen-kmp-default-4.5.5_06_k4.1.36_41-18.1 xen-kmp-default-debuginfo-4.5.5_06_k4.1.36_41-18.1 xen-libs-32bit-4.5.5_06-18.1 xen-libs-debuginfo-32bit-4.5.5_06-18.1 xen-tools-4.5.5_06-18.1 xen-tools-debuginfo-4.5.5_06-18.1 References: https://www.suse.com/security/cve/CVE-2016-10013.html https://www.suse.com/security/cve/CVE-2016-10024.html https://www.suse.com/security/cve/CVE-2016-7777.html https://www.suse.com/security/cve/CVE-2016-7908.html https://www.suse.com/security/cve/CVE-2016-7909.html https://www.suse.com/security/cve/CVE-2016-7995.html https://www.suse.com/security/cve/CVE-2016-8576.html https://www.suse.com/security/cve/CVE-2016-8667.html https://www.suse.com/security/cve/CVE-2016-8669.html https://www.suse.com/security/cve/CVE-2016-8909.html https://www.suse.com/security/cve/CVE-2016-8910.html https://www.suse.com/security/cve/CVE-2016-9101.html https://www.suse.com/security/cve/CVE-2016-9377.html https://www.suse.com/security/cve/CVE-2016-9378.html https://www.suse.com/security/cve/CVE-2016-9379.html https://www.suse.com/security/cve/CVE-2016-9380.html https://www.suse.com/security/cve/CVE-2016-9381.html https://www.suse.com/security/cve/CVE-2016-9382.html https://www.suse.com/security/cve/CVE-2016-9383.html https://www.suse.com/security/cve/CVE-2016-9385.html https://www.suse.com/security/cve/CVE-2016-9386.html https://www.suse.com/security/cve/CVE-2016-9637.html https://www.suse.com/security/cve/CVE-2016-9776.html https://www.suse.com/security/cve/CVE-2016-9932.html https://bugzilla.suse.com/1000106 https://bugzilla.suse.com/1002496 https://bugzilla.suse.com/1003030 https://bugzilla.suse.com/1003032 https://bugzilla.suse.com/1003870 https://bugzilla.suse.com/1004016 https://bugzilla.suse.com/1005004 https://bugzilla.suse.com/1005005 https://bugzilla.suse.com/1007157 https://bugzilla.suse.com/1007160 https://bugzilla.suse.com/1009100 https://bugzilla.suse.com/1009103 https://bugzilla.suse.com/1009104 https://bugzilla.suse.com/1009107 https://bugzilla.suse.com/1009108 https://bugzilla.suse.com/1009109 https://bugzilla.suse.com/1009111 https://bugzilla.suse.com/1011652 https://bugzilla.suse.com/1012651 https://bugzilla.suse.com/1013657 https://bugzilla.suse.com/1013668 https://bugzilla.suse.com/1014298 https://bugzilla.suse.com/1016340

1 0

openSUSE-SU-2017:0006-1: moderate: Security update for gd
by opensuse-security＠opensuse.org 02 Jan '17

02 Jan '17

openSUSE Security Update: Security update for gd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0006-1 Rating: moderate References: #1015187 Cross-References: CVE-2016-9933 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gd fixes the following issues: * CVE-2016-9933 possible stackoverflow on malicious truecolor images [bsc#1015187] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-3=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-3=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gd-2.1.0-13.1 gd-debuginfo-2.1.0-13.1 gd-debugsource-2.1.0-13.1 gd-devel-2.1.0-13.1 - openSUSE Leap 42.2 (x86_64): gd-32bit-2.1.0-13.1 gd-debuginfo-32bit-2.1.0-13.1 - openSUSE Leap 42.1 (i586 x86_64): gd-2.1.0-16.1 gd-debuginfo-2.1.0-16.1 gd-debugsource-2.1.0-16.1 gd-devel-2.1.0-16.1 - openSUSE Leap 42.1 (x86_64): gd-32bit-2.1.0-16.1 gd-debuginfo-32bit-2.1.0-16.1 References: https://www.suse.com/security/cve/CVE-2016-9933.html https://bugzilla.suse.com/1015187

1 0

openSUSE-SU-2017:0005-1: important: Security update for xen
by opensuse-security＠opensuse.org 02 Jan '17

02 Jan '17

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0005-1 Rating: important References: #1012651 #1014298 #1014300 #1016340 Cross-References: CVE-2016-10013 CVE-2016-10024 CVE-2016-10025 CVE-2016-9932 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for xen fixes the following issues: - A Mishandling of SYSCALL singlestep during emulation which could have lead to privilege escalation. (XSA-204, bsc#1016340, CVE-2016-10013) - CMPXCHG8B emulation failed to ignore operand size override which could have lead to information disclosure. (XSA-200, bsc#1012651, CVE-2016-9932) - PV guests may have been able to mask interrupts causing a Denial of Service. (XSA-202, bsc#1014298, CVE-2016-10024) - A missing NULL pointer check in VMFUNC emulation could lead to a hypervisor crash leading to a Denial of Servce. (XSA-203, bsc#1014300, CVE-2016-10025) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-2=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xen-debugsource-4.7.1_04-6.1 xen-devel-4.7.1_04-6.1 xen-libs-4.7.1_04-6.1 xen-libs-debuginfo-4.7.1_04-6.1 xen-tools-domU-4.7.1_04-6.1 xen-tools-domU-debuginfo-4.7.1_04-6.1 - openSUSE Leap 42.2 (x86_64): xen-4.7.1_04-6.1 xen-doc-html-4.7.1_04-6.1 xen-libs-32bit-4.7.1_04-6.1 xen-libs-debuginfo-32bit-4.7.1_04-6.1 xen-tools-4.7.1_04-6.1 xen-tools-debuginfo-4.7.1_04-6.1 References: https://www.suse.com/security/cve/CVE-2016-10013.html https://www.suse.com/security/cve/CVE-2016-10024.html https://www.suse.com/security/cve/CVE-2016-10025.html https://www.suse.com/security/cve/CVE-2016-9932.html https://bugzilla.suse.com/1012651 https://bugzilla.suse.com/1014298 https://bugzilla.suse.com/1014300 https://bugzilla.suse.com/1016340

1 0

openSUSE-SU-2017:0002-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 02 Jan '17

02 Jan '17

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0002-1 Rating: important References: #1013038 #1014943 Cross-References: CVE-2016-9756 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: The openSUSE 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-9756: KVM: x86: drop error recovery in em_jmp_far and em_ret_far (bsc#1013038). The following non-security bugs were fixed: - scsi: megaraid_sas: fix macro MEGASAS_IS_LOGICAL to avoid regression (bsc#1014943). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-1=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kernel-default-4.1.36-44.1 kernel-default-base-4.1.36-44.1 kernel-default-base-debuginfo-4.1.36-44.1 kernel-default-debuginfo-4.1.36-44.1 kernel-default-debugsource-4.1.36-44.1 kernel-default-devel-4.1.36-44.1 kernel-obs-build-4.1.36-44.3 kernel-obs-build-debugsource-4.1.36-44.3 kernel-obs-qa-4.1.36-44.1 kernel-syms-4.1.36-44.1 - openSUSE Leap 42.1 (i686 x86_64): kernel-debug-4.1.36-44.1 kernel-debug-base-4.1.36-44.1 kernel-debug-base-debuginfo-4.1.36-44.1 kernel-debug-debuginfo-4.1.36-44.1 kernel-debug-debugsource-4.1.36-44.1 kernel-debug-devel-4.1.36-44.1 kernel-debug-devel-debuginfo-4.1.36-44.1 kernel-ec2-4.1.36-44.1 kernel-ec2-base-4.1.36-44.1 kernel-ec2-base-debuginfo-4.1.36-44.1 kernel-ec2-debuginfo-4.1.36-44.1 kernel-ec2-debugsource-4.1.36-44.1 kernel-ec2-devel-4.1.36-44.1 kernel-pv-4.1.36-44.1 kernel-pv-base-4.1.36-44.1 kernel-pv-base-debuginfo-4.1.36-44.1 kernel-pv-debuginfo-4.1.36-44.1 kernel-pv-debugsource-4.1.36-44.1 kernel-pv-devel-4.1.36-44.1 kernel-vanilla-4.1.36-44.1 kernel-vanilla-debuginfo-4.1.36-44.1 kernel-vanilla-debugsource-4.1.36-44.1 kernel-vanilla-devel-4.1.36-44.1 kernel-xen-4.1.36-44.1 kernel-xen-base-4.1.36-44.1 kernel-xen-base-debuginfo-4.1.36-44.1 kernel-xen-debuginfo-4.1.36-44.1 kernel-xen-debugsource-4.1.36-44.1 kernel-xen-devel-4.1.36-44.1 - openSUSE Leap 42.1 (noarch): kernel-devel-4.1.36-44.1 kernel-docs-4.1.36-44.2 kernel-docs-html-4.1.36-44.2 kernel-docs-pdf-4.1.36-44.2 kernel-macros-4.1.36-44.1 kernel-source-4.1.36-44.1 kernel-source-vanilla-4.1.36-44.1 - openSUSE Leap 42.1 (i686): kernel-pae-4.1.36-44.1 kernel-pae-base-4.1.36-44.1 kernel-pae-base-debuginfo-4.1.36-44.1 kernel-pae-debuginfo-4.1.36-44.1 kernel-pae-debugsource-4.1.36-44.1 kernel-pae-devel-4.1.36-44.1 References: https://www.suse.com/security/cve/CVE-2016-9756.html https://bugzilla.suse.com/1013038 https://bugzilla.suse.com/1014943

1 0